CVE-2018-19829

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/listausuarios, resulting in the ability to delete an arbitrary user when the ID number is known...

CVE-2018-19829: Cross-Site Request Forgery (CSRF)

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/listausuarios, resulting in the ability to delete an arbitrary user when the ID number is known...

PT-2018-15118

Name of the Vulnerable Software and Affected Versions Artica Integria IMS version 5.0.83 Description The issue allows for CSRF in the "godmode/usuarios/lista usuarios" API endpoint, resulting in the ability to delete an arbitrary user when the user id is known. Recommendations For Artica Integria...